CVE-2019-20513: Improper Neutralization of Input During Web Page Generation

Open edX Ironwood.1 allows support/certificates?user= reflected XSS...